Hi, I installed the Tumbleweed on my laptop recently. I followed the instruction to enable the hibernation but it’s not working. is there any step I missed?
What I did is:
Create a swap partition when installing the system.(My RAM is 48 GiB and I set swap to 49 GiB)
Get the UUID of swap partion then add it to boot parameter(resume=UUID=xxxx)
Then try sudo systemctl hibernate to test the hibernate but get error: Call to Hibernate failed: Sleep verb 'hibernate' is not configured or configuration is not supported by kernel
My lattop is Thinkpad T14 G2, is any configuration I missed for hibernate?
i want to add it is only locked because it’s not encrypted if you want to hibernate while using secure boot you have to be encrypte swap
look at kernel lockdown man kernel_lockdown
i didn’t test it myself but according to the kernel manual it should work
i will try it on the fowling days to encrypt swap and see what the conditions
i had this problem and i had to disable secureboot temporally until i solve it
if i have to guess i think it want full encrypted system i am not sure yet
I’m assuming that, the /etc/crypttab file was created by Leap ?? in 2024 and simply inherited by everything that followed …
Theoretically, Tumbleweed should re-encrypt the swap partition at every boot using a key from –
/dev/urandom.
I suspect that, it doesn’t because – the crypttab entry doesn’t have any of the following entries:
cipher=
size=
sector-size=
Does anyone know which cipher should be specified?
The value in the ArchWiki “dm-crypt/Swap encryption” page – “aes-xts-plain64” doesn’t exist in the content of “/proc/crypto” of this Tumbleweed system.
# systemctl status systemd-cryptsetup@cr_swap.service
● systemd-cryptsetup@cr_swap.service - Cryptography Setup for cr_swap
Loaded: loaded (/etc/crypttab; generated)
Active: active (exited) since Mon 2026-03-30 08:51:38 CEST; 7h ago
Invocation: a267384e0ed541298e97cb0dec83acac
Docs: man:crypttab(5)
man:systemd-cryptsetup-generator(8)
man:systemd-cryptsetup@.service(8)
Process: 1115 ExecStart=/usr/bin/systemd-cryptsetup attach cr_swap /dev/disk/by-id/ata-Intenso_SSD_Sata_III_AA000000000000035990-part3 /dev/urandom swap (code=exited, status=0/SUCCESS)
Process: 1129 ExecStartPost=/usr/lib/systemd/systemd-makefs swap /dev/mapper/cr_swap (code=exited, status=0/SUCCESS)
Main PID: 1115 (code=exited, status=0/SUCCESS)
CPU: 32ms
Mär 30 08:51:38 xxx systemd[1]: Starting Cryptography Setup for cr_swap...
Mär 30 08:51:38 xxx systemd[1]: Finished Cryptography Setup for cr_swap.
#
–
The systemd Journal and systemd service status indicate that, the Swap partition is encrypted.
The “firmware update manager client utility” maintains that, the Swap partition is not encrypted …
Which then points to the the ArchWiki dm-crypt page.
Looking at the HSI-2 and HSI-3 reports it seems that, my ASUS AMD B850-PLUS-CSM mainboard’s chip set has some issues UEFI security issues – which is possibly why AMD has discontinued the production of that chip set …
Looking at the ASUS web site, there’s (at last) a BIOS update for the mainboard which was in Beta test status for the last few months – I’ll install it and see what happens – after reviewing the “Early-boot UEFI Memory Protections” which affect the NX protection for UEFI runtime services for DeviceGuard compliance.
